2013年12月30日星期一

How to make the Cisco VOIP settings for 1921 Router


As you can imagine, we are having some voice issues across the link and I need to get QoS set up between the two routers.

One of our techs has done this on an older router by defining ports using nbar and prioritizing that way.    I am not too knowledgable in Cisco routing and definately not in QoS, so please bear with me.

We ran the QoS wizard on the 1921 and got the following output:

Configuration commands for the router: 192.168.41.10
saved on Dec 9, 2011 2:53:44 PM
class-map match-any CCP-Transactional-1
class-map match-any CCP-Management-1
class-map match-any CCP-Routing-1
class-map match-any CCP-Signaling-1
class-map match-any CCP-Voice-1
policy-map CCP-QoS-Policy-1
 class CCP-Voice-1
  set dscp ef
  priority percent 50
  exit
 class CCP-Signaling-1
  set dscp cs3
  bandwidth percent 5
  exit
 class CCP-Routing-1
  set dscp cs6
  bandwidth percent 5
  exit
 class CCP-Management-1
  set dscp cs2
  bandwidth percent 5
  exit
 class CCP-Transactional-1
  set dscp af21
  bandwidth percent 5
  exit
 class class-default
  fair-queue
  random-detect
  exit
 exit
interface Serial0/0/0
 ip nbar protocol-discovery
 service-policy output CCP-QoS-Policy-1
 exit

Now, I assume I need to modify this section "class-map match-any CCP-Voice-1
" to define the ports that are used by the Shoretel system to prioritize that traffic between the routers.  I have researched and cannot find anything as to how to tell the router to priorotize specific port traffic.

Does anyone know the correct commands or structure to type? Or am I completely wrong in how this should be done? If so, can anyone point me in the right direction?

The solution
In the Shoretel Director set the Diffserv value to 184 (under Call Control -> Options)
In the Cisco device.... configure EVERY port (for director + all phones + all trunks) to

interface x/x
qos trust dscp
or
mls qos trust dscp

Create access list to map Shoretel ports

access-list 100 remark Shoretel VoIP
access-list 100 permit udp any any eq 2427
access-list 100 permit udp any any eq 2727
access-list 100 permit udp any any range 5440 5446
access-list 101 remark Shoretel Director
access-list 101 permit udp host IP_ADDRESS_OF_DIRECTOR gt 1024 any gt 1024

Add the match statements to the Voice Priority Queue created by wizard

class-map match-any CCP-Voice-1
 match ip dscp ef
 match access-group 100
 match access-group 101

You might consider bumping up the priority percent - based on the amount of concurrent calls/codecs in use/bandwidth required.

SHOW the output of the service policy to confirm
show policy int x/x
Should see tagged packets increasing in the queue - and hopefully no drop ;>

-d
Customers interested in purchasing Cisco router or the price, please refer to below links:

2013年12月17日星期二

What’s the security license for Cisco 1900, 2900, and 3900

Security license for Cisco 1900, 2900(Cisco 2901 router), and Cisco 3900 router

Security License (Paper) for Cisco 1941:  SL-19-SEC-K9(=)
Security License (Paper) for Cisco 2901-2951: SL-29-SEC-K9(=)
Security License (Paper) for Cisco 3925/3945: SL-39-SEC-K9(=)

Security License (E-Delivery) for Cisco 1941:  L-SL-19-SEC-K9=
Security License (E-Delivery) for Cisco 2901-2951: L-SL-29-SEC-K9=
Security License (E-Delivery) for Cisco 3925/3945: L-SL-39-SEC-K9=

You can use the Cisco Network Access Control (NAC) Network Module, which adds the feature-rich Cisco NAC Appliance Server capabilities, with Cisco 2900 and 3900 Series Integrated Services Routers. The Cisco NAC Appliance (formerly Cisco Clean Access Server) is a rapidly deployable NAC product that allows network administrators to authenticate, authorize, evaluate, and remediate wired, wireless, and remote users and their machines prior to allowing users onto the network.
The integration of Cisco NAC Appliance Server capabilities into a network module for integrated services routers allows network administrators to manage a single device in a branch office for data, voice, and security requirements, reducing network complexity, IT staff training, equipment sparing requirements, and maintenance costs.

It is refered from

2013年12月16日星期一

How to solve the wrong duplex setting of Cisco Router 3900

We have a Cisco 3900, and our ISP told us that our config (below) has the wrong duplex setting. They want us to change it to 100 FULL.

1. What is the command to change the duplex to FULL (without restarting the router).
2. What if the link goes down, how do I revert back to the old settings (AUTO)?

interface GigabitEthernet0/0
 description Internet via $ETH-WAN$$FW_OUTSIDE$
 ip address 209.xx.xx.xx 255.255.255.252
 ip access-group 101 in
 no ip redirects
 no ip proxy-arp
 ip verify unicast reverse-path
 ip flow ingress
 duplex auto
 speed 100
 no mop enabled

The solution:
try
interface GigabitEthernet0/0
spped 100
duplex full
sh int gi 0/0  will show the current settings .

or just try:
show int --> shows half duplex.. did u apply the commands
regarding question number 2 ...  no need to restart .
just change the duplex to  auto ( duplex auto)
or
int gi 0/0
shut
no shut.

The other end could also just not be Cisco 3900 series router, sometimes disparate hardware requires that you force the GB connection to Full.
The standard is to set 1Gbps connections to auto, but when it first came out we often had to force it to get it to work with some hardware.
Sometimes when the duplex negotiation fails it will fall-back to half-duplex.  Therefore it's not correct to say that the other end is definitely set to half.  Negotiation could fail for a number of reasons, including manually specifying the speed.

The main reason ISPs specify manual speed and duplex settings is because they want to mitigate any chance of auto-negotiation failure which would result in half-duplex operation and therefore reduce support incidents.

2013年11月26日星期二

The problem of Cisco router size - BGP routing table


1) A router that will be dual-homed to two different ISP's (same speed lnks - let's say 100-Mb each), and will be maintaining a full routing table to choose the best path based on BGP path attributes.  So, in this case, the router will not be offering Internet transit services.

2) Same router, but it will only be storing a select number of Internet routes (for key sites/businesses - let's say 1,000 routes.)  Still, no transit traffic.

3) Lastly, an ISP router maintaining full Internet routing table (322K routes as of today), and three OC3 connections to other ISP neighbors.

The solution:
Hardset requirements:

BGP Full table, Cisco recommends 1GB of RAM
CEF Requirements (if enabled [enabled on most by default])256-512MB of RAM
RIB Requirements (256-512MB)
iBGP = Branch routers
eBGP = WAN/Edge Routers


http://www.cisco.com/en/US/products/hw/routers/ps359/products_tech_note09186a0080110d68.shtml#ts1
http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a00800949e8.shtml
http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094a83.shtml

Branch routers have rinky dink processors, very low throughput and not intended for any type of service as an edge device for production traffic. Running eBGP, a full table, I would not even consider looking at any ISR routers. I focus on anything that is for enterprise and service provider edge applications, in your case: Internet Edge Routers

armed with new information

- eBGP w/ two ISP's (no iBGP)
- let's say partial BGP routes this time (let's go with approximately 1,000)
- OSPF locally, but minimal OSPF routes (let's say less than 20)
- no other services or processes

You also have to take cost into consideration:

This does not justify the need for a 7200 or a ASR as your requirement does not include a full table, however, with multiple peers, eBGP, a beefier processor would be needed. The only router that supports anything above 200Mbps (100Mbps plus 100Mbps downstream to your network ) is the 3900 series based on packets per second. Note: The ISR routers feature an ASIC bus, replacing the PCI bus found in older routers. Please note that unlike ASIC driven switches and routers, the ASIC found in the ISR line of routers is just for bus operation only. Routing functions are still fully handled by the CPU

http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf
The 2800 routes do not have the performance to meet 200Mbps.

Customers interested in purchasing Cisco router or its price, please refer to below links:




2013年11月19日星期二

Why the Cisco router 2901 amber alarm always on

Question: I have a cisco 2901 router amber light is on all the times once its powered on with the cables plugged in or without the cables but the router still not working correctly.

Here's what I have troubleshooted:

1. I have tested the smart Jack by using a loop  back plug and it turned green from red.

2. I have tested from the circuit ID ( biscuit Jack) to the smart Jack and it passed using a loop back plug.

3. I have tested the router by plugging the loop back plug in to the ethwic card T1 port csu/dsu on the router and it turned green but the amber or alarm is still on .

4. I have copied the old configurations from the old cisco router 2901 and paste it into the new router using hyper terminal but the new router still having (al) alarm on.

I have attempted and exhausted every method to figure out why the alarm is always on but no avail. I can only think either hardware or software might be the problem with the new router but not sure.

I have ordered a brand new cisco router 2901 and it will be here this coming Monday and hopefully someone can share some advice.


Solution:
A few initial questions.
What ios is running?
What happens when you do show controllers t1?
If you do not see any alarms, then the local hardware is probably in good condition. In that case, complete the following steps:

Check the cabling. Ensure that the cable between the interface port and the T1 Service Provider's equipment or T1 terminal equipment is connected correctly. Ensure the cable is connected to the correct ports. Correct the cable connections if necessary.

Check the cable integrity by looking for breaks or other physical abnormalities in the cable. Ensure the pinouts are set correctly. Replace the cable if necessary.

Check the settings at the remote end and verify that they match your port settings.

If the problem persists, contact your service provider.
Cisco 2901 price, please visit 3anetwork.com for the newest discount news